Lucene search
+L

126326 matches found

Kitploit
Kitploit
β€’added 2026/09/09 5:25 p.m.β€’6 views

CVE-2016-5195

This record is for learning purposes only; any illegal use is prohibited. Principle The vulnerability works by concurrently flushing dirty pages, causing the content of a file that was originally read-only to be modified. If the modified file is owned by root and has the SUID permission, it can b...

7.2CVSS7.1AI score0.83524EPSS
SaveExploits91
Kitploit
Kitploit
β€’added 2026/09/09 5:24 p.m.β€’6 views

CVE-2023-0156

CVE ID : CVE-2023-0156 Vulnerability Type : Directory Traversal Description : The All-In-One Security AIOS plugin for WordPress is vulnerable to directory traversal in versions up to, and including, 5.1.4. This allows authenticated attackers with administrator-level permissions to read the conten...

4.9CVSS5.7AI score0.19921EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/09 5:23 p.m.β€’6 views

CVE-2023-26563-26564-26565

The vendor has reportedly fixed all vulnerabilities detailed as of releases made after 2024. Ruptura InfoSecurity has not verified that these fixes are complete. See vendor comments in https://github.com/RupturaInfoSec/CVE-2023-26563-26564-26565/issues/1. CVE-2023-26563 - Local File Read in ASPCo...

9.8CVSS7.9AI score0.01886EPSS
SaveExploits1References2
Kitploit
Kitploit
β€’added 2026/09/09 5:23 p.m.β€’9 views

winboxPOC

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script is simple used with simple arguments in the...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
β€’added 2026/09/09 5:22 p.m.β€’5 views

CVE-2025-58360-GeoServer-XXE

CVE-2025-58360: GeoServer XXE Lab Unauthenticated XML External Entity XXE Injection in GeoServer OWS/WMS Services CVSS: 9.8 CRITICAL Affected: SLDHandler.parse | | - SLDParser.parseSLD | File/SSRF...

9.8CVSS7.9AI score0.64874EPSS
SaveExploits4
Kitploit
Kitploit
β€’added 2026/09/09 5:22 p.m.β€’5 views

CVE-2026-54420-LiteSpeed-Symlink-Exploit

CVE-2026-54420 - LiteSpeed cPanel Plugin Symlink Privilege Escalation ⚠️ WARNING This code is ONLY for educational purposes and authorized security testing. Unauthorized use against systems without explicit permission is ILLEGAL. πŸ“‹ Description CVE-2026-54420 is a symlink privilege escalation...

8.5CVSS6.2AI score0.01439EPSS
SaveExploits3
Kitploit
Kitploit
β€’added 2026/09/09 5:18 p.m.β€’4 views

CVE-2021-21017

CVE-2021-21017 Not another Adobe Reader Byte Order Mark bug : root@kitploit: IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl !=...

8.8CVSS8.2AI score0.86326EPSS
SaveExploits2
NVD
NVD
β€’added 2026/09/09 5:17 p.m.β€’8 views

CVE-2026-87875

The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...

4.3CVSS
SaveExploits0References5
NVD
NVD
β€’added 2026/09/09 5:17 p.m.β€’4 views

CVE-2026-85788

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments that the regex engine does not treat as...

5.7CVSS
SaveExploits0References3
Kitploit
Kitploit
β€’added 2026/09/09 5:12 p.m.β€’6 views

CVE-2024-28995

CVE-2024-28995 PoC and Bulk Scanner Overview This repository contains a proof-of-concept PoC and a bulk scanner for the SolarWinds Serv-U CVE-2024-28995 directory traversal vulnerability. This vulnerability allows unauthorized access to read sensitive files on the host machine. The vulnerability...

8.6CVSS8.1AI score0.99614EPSS
SaveExploits8
Kitploit
Kitploit
β€’added 2026/09/09 5:09 p.m.β€’7 views

CVE-2024-24919-Incident-Report.md

πŸ›‘οΈ SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Date: Jun 06, 2024 Investigation Type: Web Attack Platform: LetsDefend Rule Triggered: SOC287 – Arbitrary File Read Detected CVE: CVE-2024-24919 Severity: High Impact: Unauthorized access to sensitive system files via...

8.6CVSS7.9AI score0.99978EPSS
SaveExploits53
Kitploit
Kitploit
β€’added 2026/09/09 5:04 p.m.β€’10 views

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

9.1CVSS8.2AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
β€’added 2026/09/09 5:01 p.m.β€’7 views

CVE-2006-3392

CVE-2021-42913 Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from...

7.5CVSS7.9AI score0.78286EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/09 4:59 p.m.β€’7 views

CVE-2020-5902

CVE-2020-5902 Python script to exploit F5 Big-IP CVE-2020-5902 Examples Exploit local file read: python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Exploit RCE: python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

10CVSS7.5AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
β€’added 2026/09/09 4:48 p.m.β€’9 views

CVE-2023-35843

CVE-2023-35843 CVE-2023-35843 Arbitrary File Read Vulnerability...

7.5CVSS7.4AI score0.08875EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/09 4:48 p.m.β€’8 views

nginx-CVE-2017-7529

Nginx out-of-bounds read cache vulnerability CVE-2017-7529 Vulnerability Principle References: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7 http://galaxylab.org/cve-2017-7529-nginx%E6%95%B4%E6%95%B0%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/ When Nginx acts ...

7.5CVSS6.9AI score0.62597EPSS
SaveExploits6
Kitploit
Kitploit
β€’added 2026/09/09 4:44 p.m.β€’7 views

CVE-2026-66066

CVE-2026-66066 β€” KindaRails2Shell Ruby on Rails Active Storage + libvips arbitrary file read β†’ conditional remote code execution RCE PoC tool. Single-file, Python 3.11+ pure standard library with zero dependencies , includes MAT/HDF5 hybrid payloads, a pure-Python PNG pixel decoder, offset reads,...

9.5CVSS8.4AI score0.27861EPSS
SaveExploits10
Kitploit
Kitploit
β€’added 2026/09/09 4:40 p.m.β€’5 views

CVE-2024-34470

CVE-2024-34470 Description: An Unauthenticated user can abuse Path Traversal vulnerability exists in the /public/loader.php file. The path parameter does not properly filter whether the file and directory passed are part of the webroot, allowing an attacker to read arbitrary files on the server...

8.6CVSS8.1AI score0.06699EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/09 4:37 p.m.β€’8 views

CVE-2022-1386

CVE-2022-1386 - Fusion Builder 3.6.2 - Unauthenticated SSRF Description Fusion Builder is a WordPress plugin that allows users to create and edit pages using a drag-and-drop interface. It is vulnerable to an unauthenticated SSRF that allows an attacker to read any file on the server. Proof of...

9.8CVSS8.2AI score0.71427EPSS
SaveExploits6
Kitploit
Kitploit
β€’added 2026/09/09 4:30 p.m.β€’6 views

SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X RECONSTRUCTIONANALYSIS CVE-2026-21858: Ni8mare - n8n RCE Full Chain Exploit 1. Executive Summary & Overview This document presents a deterministic technical reconstruction analysis of the CVE-2026-21858 vulnerability, internally...

10CVSS8.3AI score0.78447EPSS
SaveExploits23
Rows per page
Query Builder